CVE-2013-0196

CVE-2013-0196 describes a Cross-Site Request Forgery (CSRF) vulnerability in OpenShift Enterprise 1.2, specifically within its web console and REST API. The absence of CSRF protection, coupled with the use of Basic authentication, allows an attacker to potentially steal user credentials and Authorization headers when a victim accesses the REST API through their web browser. This vulnerability is rated Medium severity with a CVSS score of 6.5. It has a low attack complexity and requires user interaction (UI:R), but a successful exploit could lead to high integrity impact (I:H) by compromising user accounts. There is no evidence of active exploitation, nor is there publicly available exploit code in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.